CVE-2010-0639

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

La función htcpHandleTstRequest en el archivo htcp.c en Squid versiones 2.x anterior a 2.6.STABLE24 y versión 2.7 anterior a 2.7.STABLE8, y en el archivo htcp.cc en versión 3.0 anterior a 3.0.STABLE24, permite que los atacantes remotos causen una denegación de servicio (desreferencia de puntero NULL y bloqueo del demonio) por medio de paquetes creados hacia el puerto HTCP.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-02-15 CVE Reserved
2010-02-15 CVE Published
2023-04-18 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (12)

URL	Tag	Source
http://bugs.squid-cache.org/show_bug.cgi?id=2858	X_refsource_misc
http://osvdb.org/62297	Vdb Entry
http://www.securityfocus.com/bid/38212	Vdb Entry
http://www.securitytracker.com/id?1023587	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch	2010-08-02
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patch	2010-08-02

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035961.html	2010-08-02
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037159.html	2010-08-02
http://secunia.com/advisories/38812	2010-08-02
http://www.squid-cache.org/Advisories/SQUID-2010_2.txt	2010-08-02
http://www.vupen.com/english/advisories/2010/0371	2010-08-02
http://www.vupen.com/english/advisories/2010/0603	2010-08-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.0 Search vendor "Squid-cache" for product "Squid" and version "2.0"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.1 Search vendor "Squid-cache" for product "Squid" and version "2.1"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.2 Search vendor "Squid-cache" for product "Squid" and version "2.2"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.3 Search vendor "Squid-cache" for product "Squid" and version "2.3"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.4 Search vendor "Squid-cache" for product "Squid" and version "2.4"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.5 Search vendor "Squid-cache" for product "Squid" and version "2.5"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.6 Search vendor "Squid-cache" for product "Squid" and version "2.6"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.7 Search vendor "Squid-cache" for product "Squid" and version "2.7"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.7 Search vendor "Squid-cache" for product "Squid" and version "2.7"		stable3		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				2.7 Search vendor "Squid-cache" for product "Squid" and version "2.7"		stable4		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0 Search vendor "Squid-cache" for product "Squid" and version "3.0"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable1 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable1"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable2 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable2"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable3 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable3"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable4 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable4"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable5 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable5"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable6 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable6"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable7 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable7"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable8 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable8"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable9 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable9"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable11 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable12 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable12"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable13 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable13"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable14 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable14"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable15 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable15"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable16 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable17 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable17"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable18 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable18"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable19 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable19"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable20 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable20"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable21 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable21"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable22 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable22"		-		Affected
Squid-cache Search vendor "Squid-cache"		Squid Search vendor "Squid-cache" for product "Squid"				3.0.stable23 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable23"		-		Affected